Data protection

• the administration of our corporate functions
  
  
• personal data contained in our archive collections

The NAS seeks to enshrine this in our data protection policy and our own procedures for handling personal data. The 8 data protection principles are an integral part of the data protection regime and give an oversight of the aims and reasons behind the act. We aim to ensure that any personal data which we hold as an organisation remains accurate, up to date, secure and that it is processed in accordance with the provisions of the Act. The Act is administered and enforced by the Information Commissioner - an independent authority reporting directly to parliament.

The NAS has produced codes of practice to ensure it complies with the legislation by following corporate wide policies and procedures for the management and administration of information. The Data Protection Code of Practice on Administrative Information (Acrobat PDF 455KB, new window) applies to corporate information created or received by us in the course of our business transactions. The Data Protection Code of Practice on Archival Information (Acrobat PDF 224KB, new window) applies to archival information transferred to the NAS for permanent preservation.

The rights of data subjects (individuals on whom information is held) whether as clients or individuals whose data is contained within record collections or as employees of the NAS, must all be recognised and easily accessible. A standard form and background information are available to deal with subject access requests.

The Act also covers areas CCTV monitoring which the NAS undertakes and the processing of personal information held not only in the administration of our corporate duties but with the archive material we hold and is comprehensively covered under the NAS Code of Practice on Data Protection.